$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66313a3a2f34382d3438203d3e2030.roa File: 323630323a663939323a66313a3a2f34382d3438203d3e2030.roa (raw, json) Hash identifier: YTwFmzgbdVgh5MV70gadVkuqTLHlIUY2ZnBOY6D4sbY= Subject key identifier: DA:EB:55:8E:C5:47:AA:1D:39:3B:22:95:B0:B8:0E:1C:78:D7:E1:74 Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Certificate serial: 3A8FC49DAB4E4521486E47B532D56DB2E98DB67A Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66313a3a2f34382d3438203d3e2030.roa Signing time: Tue 24 Jun 2025 12:01:07 +0000 ROA not before: Tue 24 Jun 2025 11:56:07 +0000 ROA not after: Tue 23 Jun 2026 12:01:07 +0000 asID: 0 IP address blocks: 2602:f992:f1::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 13:14:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:8f:c4:9d:ab:4e:45:21:48:6e:47:b5:32:d5:6d:b2:e9:8d:b6:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355 Validity Not Before: Jun 24 11:56:07 2025 GMT Not After : Jun 23 12:01:07 2026 GMT Subject: CN=DAEB558EC547AA1D393B2295B0B80E1C78D7E174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:17:a6:b1:42:d3:b6:86:04:f9:08:bb:c7:47: e1:86:3e:51:24:6e:32:3e:34:3a:08:91:d9:99:42: a6:55:13:5d:d6:43:12:ce:73:4b:bb:d4:f7:1b:af: 9f:cf:2c:b6:9e:17:bd:fa:68:63:36:1e:bc:4a:4b: 94:69:ca:d7:39:b8:34:ce:14:be:7f:18:89:f0:62: b1:28:5c:0f:f3:14:c8:99:1f:25:69:da:a3:b5:e7: 53:a9:c9:cd:43:56:0d:f2:b0:c4:a1:61:a4:ec:d3: eb:a8:92:46:bd:26:cd:e8:6a:87:af:bc:c4:4b:ec: 4e:e9:40:41:b0:c6:f2:a6:ae:32:d9:60:02:3e:bb: 45:4b:e1:c8:ec:ff:60:e0:e1:14:b7:fa:9b:89:d2: a7:e2:0d:ed:1d:3a:d2:e1:6b:0d:21:b9:2b:83:ea: 90:eb:38:af:26:a2:95:e4:e2:8e:00:cd:57:f5:3a: ef:2f:c9:e3:ba:e1:53:03:69:4d:b1:71:8a:16:54: db:9c:5b:58:01:a1:ca:88:6a:b8:a5:a4:e9:16:ea: 96:85:48:d8:79:d2:86:85:93:71:be:dd:56:17:47: 75:f1:ea:8d:b8:ec:b4:93:e8:49:df:1e:59:b0:ab: 35:f0:a4:3e:2c:72:1a:b6:31:cd:c1:9d:c1:76:19: 77:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:EB:55:8E:C5:47:AA:1D:39:3B:22:95:B0:B8:0E:1C:78:D7:E1:74 X509v3 Authority Key Identifier: keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a66313a3a2f34382d3438203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f992:f1::/48 Signature Algorithm: sha256WithRSAEncryption 34:6b:29:da:94:19:63:e2:eb:7a:20:88:4d:6b:59:91:36:29: 43:8c:02:71:86:39:7a:5b:8e:3a:f8:47:4b:63:46:cc:9f:9f: a2:a8:57:f4:81:fa:be:b4:42:51:bb:77:1a:54:2c:3b:eb:f3: 2f:16:04:ce:8c:56:e7:51:e7:f1:d0:e2:87:40:db:45:e3:7f: 60:53:74:e3:4e:3f:6a:e1:67:ba:00:29:77:43:7c:7c:3b:c1: 01:96:aa:7f:6d:5d:33:7e:d8:e0:cf:3b:a8:a4:a6:7c:4f:5f: f1:b6:0f:9f:a7:a6:90:36:8d:49:8e:3b:f5:d3:c8:a4:bc:ef: 52:a1:d9:48:7f:ef:51:8e:62:d0:67:84:fc:6f:0c:9d:74:57: 37:91:07:88:02:b5:a4:d7:55:f7:36:2f:d1:23:bf:07:da:48: 00:e6:3c:0b:7f:d0:6c:13:8c:27:f6:9f:27:4c:5f:c2:be:85: 21:9e:73:cb:9f:41:ae:66:51:76:13:91:cd:59:03:c1:15:ec: 06:e3:d8:72:eb:c2:1b:c4:7b:02:0b:4b:52:ee:7e:9f:47:14: e4:e2:1d:5c:34:5c:25:06:58:04:21:69:65:35:cb:53:0d:cc: a1:ee:1e:f7:fe:e6:70:0c:01:0b:59:62:da:72:ce:bf:34:69: 75:db:1b:58 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUOo/EnatORSFIbke1MtVtsumNtnowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjUwNjI0MTE1NjA3WhcNMjYwNjIzMTIwMTA3 WjAzMTEwLwYDVQQDEyhEQUVCNTU4RUM1NDdBQTFEMzkzQjIyOTVCMEI4MEUxQzc4 RDdFMTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBemsULTtoYE +Qi7x0fhhj5RJG4yPjQ6CJHZmUKmVRNd1kMSznNLu9T3G6+fzyy2nhe9+mhjNh68 SkuUacrXObg0zhS+fxiJ8GKxKFwP8xTImR8ladqjtedTqcnNQ1YN8rDEoWGk7NPr qJJGvSbN6GqHr7zES+xO6UBBsMbypq4y2WACPrtFS+HI7P9g4OEUt/qbidKn4g3t HTrS4WsNIbkrg+qQ6zivJqKV5OKOAM1X9TrvL8njuuFTA2lNsXGKFlTbnFtYAaHK iGq4paTpFuqWhUjYedKGhZNxvt1WF0d18eqNuOy0k+hJ3x5ZsKs18KQ+LHIatjHN wZ3Bdhl39wIDAQABo4ICzDCCAsgwHQYDVR0OBBYEFNrrVY7FR6odOTsilbC4Dhx4 1+F0MB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00 OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4 MTc2ZmE0MzEwYjYzNTUuY2VyMIGpBggrBgEFBQcBCwSBnDCBmTCBlgYIKwYBBQUH MAuGgYlyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8xLzMyMzYzMDMy M2E2NjM5MzkzMjNhNjYzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAJgL5kgDxMA0GCSqGSIb3DQEBCwUAA4IBAQA0aynalBlj4ut6IIhNa1mR NilDjAJxhjl6W446+EdLY0bMn5+iqFf0gfq+tEJRu3caVCw76/MvFgTOjFbnUefx 0OKHQNtF439gU3TjTj9q4We6ACl3Q3x8O8EBlqp/bV0zftjgzzuopKZ8T1/xtg+f p6aQNo1Jjjv108ikvO9SodlIf+9RjmLQZ4T8bwyddFc3kQeIArWk11X3Ni/RI78H 2kgA5jwLf9BsE4wn9p8nTF/CvoUhnnPLn0GuZlF2E5HNWQPBFewG49hy68IbxHsC C0tS7n6fRxTk4h1cNFwlBlgEIWllNctTDcyh7h73/uZwDAELWWLacs6/NGl12xtY -----END CERTIFICATE-----Generated at Sun Jun 29 15:12:52 2025 by rpki-client